Privacy Policy
This Privacy Policy explains how Mariusz Charusta Development processes the personal data of people who visit this website, contact me or use my applications, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.
1. Data controller
The controller of your personal data is Mariusz Charusta, running a sole proprietorship under the business name Mariusz Charusta Development, Polish tax ID (NIP) 7752524643 (the “Controller”). For any matter concerning personal data, contact: charustamariusz@protonmail.com.
The Controller has not appointed a Data Protection Officer, as it is not required to do so.
2. What data I process, why, and on what legal basis
- E-mail contact — e-mail address, name and any other data you include in your message. Purpose: replying to your message and further correspondence. Legal basis: the Controller's legitimate interest (Art. 6(1)(f) GDPR) and, where your message concerns a contract, taking steps prior to entering into a contract (Art. 6(1)(b) GDPR).
- Cooperation and contracts — clients' contact and billing details. Purpose: concluding and performing a contract, invoicing. Legal basis: Art. 6(1)(b) GDPR and compliance with legal obligations, e.g. tax and accounting (Art. 6(1)(c) GDPR).
- Technical logs — the server keeps no visitor log; error logs may record an IP address, date and time, and the page requested. Purpose: keeping the website running and secure. Legal basis: the Controller's legitimate interest (Art. 6(1)(f) GDPR).
- Establishing, exercising or defending legal claims — data necessary in the given case. Legal basis: Art. 6(1)(f) GDPR.
Providing data is voluntary, but without it I cannot reply to your message or enter into a contract.
3. Garmin watch applications
Connect IQ applications published by Mariusz Charusta Development are distributed through the Garmin Connect IQ Store. The data processed by a given application (e.g. training or health data from your Garmin account) is listed in its store description and — if the application uses its own server — in that application's separate privacy policy. Such data is used solely to provide the application's features, is never sold or shared for marketing purposes, and is deleted when access is revoked or at the user's request.
The processing of data by Garmin (Connect IQ Store, Garmin Connect app) is governed by Garmin's own privacy policy.
4. Cookies and analytics
This website does not use cookies, analytics tools, tracking pixels, or third-party fonts and scripts. I do not profile users or subject them to automated decision-making.
5. Recipients of data
This website is hosted on the Controller's own server. Data may be disclosed only to:
- technical service providers I use — my e-mail provider (Proton AG, Switzerland) and the network service provider that makes this website available on the internet (Tailscale Inc., USA), to the extent necessary to provide those services;
- accounting and legal service providers — in the case of business cooperation;
- public authorities — where required by law.
6. Transfers outside the EEA
Switzerland is covered by a European Commission adequacy decision. Transfers to providers in the USA are based on the Commission's adequacy decision on the EU-US Data Privacy Framework (where the provider is certified under it) or on standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR).
7. Retention period
- correspondence — until the matter is closed, and then until any potential claims become time-barred;
- contract and billing data — for the period required by tax and accounting law (as a rule, 5 years from the end of the tax year);
- technical logs — briefly; they are automatically overwritten by log rotation, unless needed to investigate a security incident.
8. Your rights
You have the right to:
- access your data and receive a copy of it (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21 GDPR),
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before its withdrawal.
To exercise these rights, write to charustamariusz@protonmail.com. I will respond without undue delay and within one month at the latest.
You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.
9. Security
I apply appropriate technical and organisational measures, including encrypted HTTPS connections, restricted server access and regular software updates.
10. Changes to this policy
This policy may be updated, e.g. due to changes in law or new services. The current version, with its effective date, is always available on this page.